diff --git a/assets/js/MinterBoard.js b/assets/js/MinterBoard.js index 5e635d5..5bf3e58 100644 --- a/assets/js/MinterBoard.js +++ b/assets/js/MinterBoard.js @@ -1394,10 +1394,18 @@ const handleInviteMinter = async (minterName) => { } } +function escapeForHtmlAttribute(str) { + return str + .replace(/'/g, ''') + .replace(/"/g, '"'); +} + const createInviteButtonHtml = (creator, cardIdentifier) => { + // Safely escape special chars so they won't break the HTML attribute + const safeCreator = escapeForHtmlAttribute(creator); return `